Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: nky7p5YzEzpRUQM809UkHyltHO9bcKT0FuxUJ2u+0CM=
Subject key identifier: 85:C1:C1:53:BD:92:46:32:DC:1C:47:90:50:ED:F2:0D:A8:15:FF:DD
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 01A141CCA8B30EC01DFDCB34CBBCED848928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 11B3
Signing time: Thu 15 Oct 2026 23:01:33 +0000
Manifest this update: Thu 15 Oct 2026 23:01:33 +0000
Manifest next update: Fri 16 Oct 2026 23:01:33 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: riuoCVGPVk0Dx1GIKsxMS/7gVia1C2TEcJZX1vVzbQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:cc:a8:b3:0e:c0:1d:fd:cb:34:cb:bc:ed:84:89:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Oct 15 23:01:33 2026 GMT
Not After : Oct 16 23:01:33 2026 GMT
Subject: CN=85c1c153bd924632dc1c479050edf20da815ffdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:75:45:72:7c:65:18:31:76:5e:d1:3a:59:
8c:72:72:87:7c:a5:d7:24:17:6d:12:3c:12:6c:41:
89:2c:03:0b:72:d3:d2:40:61:b1:59:dd:80:55:1d:
0b:9b:4d:4d:6f:1f:b8:ab:fc:19:d9:42:46:67:54:
6c:4d:21:b4:c7:b3:d4:37:12:ce:be:e6:99:3d:46:
b7:b9:d2:7b:55:e9:68:08:71:62:db:48:a5:58:c8:
1b:f7:17:b6:5a:2b:8f:c8:94:65:27:6f:00:77:8e:
70:68:b5:a0:83:47:26:86:22:e9:19:ad:10:af:fe:
37:5c:2d:9d:53:f7:b2:8e:89:0a:85:b6:22:cd:41:
94:6e:51:24:44:19:c7:cd:3d:f1:87:af:57:80:99:
a0:bf:ac:49:24:11:9a:79:a6:51:d4:db:64:47:3f:
59:cc:ce:6b:d9:cc:86:46:7f:2f:ee:e8:3f:a5:07:
cf:91:07:f6:02:ac:58:ea:e1:5f:21:80:76:9d:35:
05:68:ba:0f:76:3f:bd:da:54:5d:c3:65:56:ab:3d:
84:43:65:7a:54:f3:3b:e1:43:8f:39:63:be:ef:8e:
a1:bc:5c:f1:41:8e:94:c2:02:8c:8b:63:64:5c:45:
9d:34:1b:3e:31:20:db:6c:d0:3c:2f:62:b0:3a:a3:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:C1:53:BD:92:46:32:DC:1C:47:90:50:ED:F2:0D:A8:15:FF:DD
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d0:3e:18:e2:ba:3c:21:cf:5d:53:e7:7a:a2:23:13:8c:0d:
43:fe:eb:a9:97:96:23:98:c4:c2:85:3b:57:0e:6a:59:99:d0:
98:69:24:22:c9:22:ad:cc:69:12:f5:ea:fa:c0:92:2f:9e:6e:
e4:20:e3:2d:d8:c0:9d:aa:93:d1:ab:fd:f9:f6:7b:f3:9a:a1:
2a:8e:ed:9f:b3:f7:d5:9d:1a:b1:1d:f1:2a:15:a7:c1:8e:40:
10:51:69:65:11:95:fb:d6:8a:53:d3:e4:4e:cd:da:a2:6c:4c:
0d:7d:f0:f3:a2:e4:c0:78:0d:ee:0b:b8:1f:00:49:6b:58:55:
af:97:bb:2a:40:6e:63:73:a2:a8:88:9b:da:ce:fb:d7:27:9f:
1a:1a:43:85:72:6b:e6:ac:2a:de:56:fc:e6:8a:6f:3d:2c:a4:
ff:4b:91:92:21:ca:27:1b:2e:34:11:e4:bc:1f:cc:b6:e9:8c:
eb:69:9e:a9:ec:cd:e4:06:04:82:a0:c6:5c:d6:a6:4d:d6:55:
b6:b2:e6:c8:0c:8f:3d:08:47:71:e4:70:ec:18:ea:87:b3:aa:
b8:ef:c1:55:7e:55:86:dc:15:2c:08:f4:92:68:27:6c:9b:de:
2b:d4:6c:3e:26:fc:8d:8c:e2:12:2d:92:99:2f:f9:5f:b5:e1:
f1:54:72:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:03:16 2026 by rpki-client